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EXCHANGE OF INFORMATION 
FIELD 

This invention relates generally to computers and more particularly to managing a 
5 controUed-communication program between multiple participants using computers. 

BACKGROUND 

Companies often work together on joint projects or programs to develop products. 

1 0 Each company may have confidential information that it needs to share in order to achieve 
the goals of the program. This confidential information may include data about new 
technology, product plans, customer lists, or any other information that gives a company a 
competitive advantage. The companies are concerned that their confidential information 
should only be used to achieve the program goals and should not be distributed to others 

1 5 not working on the program. To address these concerns, companies often sign contracts, 
called non-disclosure agreements that specify the terms and conditions under which they 
will disclose and receive confidential information to and from each other and the steps 
they will take to prevent disclosure of the confidential information to third parties who are 
not participants in the program. A participant may be a company, an employee of the 

20 company, a contractor affiliated with the company, an individual, or any other suitable 
entity. 

Because products are often large and compUcated, often many participants may be 
involved. When multiple participants are working together on a program, to initiate a 
discussion, one participant must ask another participant to show evidence of their 
25 contract, indicating that they are authorized to discuss the program and exchange 
information. Since a company might have dozens or even hundreds of employees 
working on the program, not everyone may have a copy of the contract, and there may be 
confiision about its existence. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 depicts a block diagram of a network of computers for implementing an 
embodiment of the invention. 

Fig. 2 depicts a block diagram of a user interface log-in screen, according to an 
5 embodiment of the invention. 

Fig. 3 depicts a block diagram of a user interface contract-acceptance screen, 
according to an embodiment of the invention. 

Fig. 4 depicts a block diagram of a user interface access-control screen, according 
to an embodiment of the invention. 

10 Fig. 5 depicts a block diagram of a user interface field-activity screen, according 

to an embodiment of the invention. 

Fig. 6 depicts a block diagram of a user interface user-activity screen, according to 
an embodiment of the invention. 

Fig. 7 depicts a block diagram of a user interface request-access screen, according 
15 to an embodiment of the invention. 

Fig. 8 depicts a block diagram of a user interface company-information screen, 
according to an embodiment of the invention. 

Fig. 9 depicts a block diagram of a user interface my-company-information screen, 
according to an embodiment of the invention. 

20 Fig. 10 depicts a flowchart of processing, accordmg to an embodiment of the 

invention. 

Fig. 1 1 depicts a flowchart of processing, according to an embodiment of the 
invention. 
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DETAILED DESCRIPTION 



In the following detailed description of exemplary embodiments of the invention, 
reference is made to the accompanying drawings (where like numbers represent like 
elements), which form a part hereof, and in which is shown by way of illustration specific 
5 exemplary embodiments in which the invention may be practiced. These embodiments 
are described in sufficient detail to enable those skilled in the art to practice the invention, 
but other embodiments may be utiKzed and logical, mechanical, electrical, and other 
changes may be made without departing from the scope of the present invention. The 
following detailed description is, therefore, not to be taken in a limiting sense, and the 
1 0 scope of the present invention is defined only by the appended claims. 

In the following description, numerous specific details are set forth to provide a 
thorough understanding of the invention. However, it is understood that the invention 
may be practiced without these specific details. In other instances, well-known circuits, 
structures and techniques have not been shown in detail in order not to obscure the 
15 invention. 

Fig, 1 depicts a block diagram of system 100, which may include a network of 
computers for implementing an embodiment of the invention. 

System 100 includes clients 110, network 120, and server 130. According to this 
embodiment, in system 100, server 130 provides clients 110 with the ability to exchange 

20 confidential information about a controUed-communication program via network 120. In 
one embodiment, a controlled-communication program may be a joint-development 
program in which multiple participants (such as individuals, companies, or other entities) 
share confidential information in order to develop a product or service. But, in other 
embodiments, a controUed-commxmication program may be any program in which 

25 participants achieve the program goals by communicating information in a controlled 
fashion. 
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Clients 1 10 may be implemented using any suitable hardware and/or software, 
such as personal computers available from a number of vendors. But, other examples 
may be portable computers, network computers, laptop or notebook computers, PDAs 
(Personal Digital Assistants), mainframe computers, or any other suitable computing 
5 devices. Although two clients 11 0 are shown, in other embodiments any number of 

cUents may be present. Client 1 10 may include input device 111, enabling a user of client 
1 10 to input data to be sent data to server 130, and output device 1 12, enabling a user of 
chent 1 10 to receive data. 

Network 120 may be any suitable network capable of supporting communication 
10 between chents 1 10 and server 130. Although one network 120 is shown, in other 

embodiments any number of networks may be present and clients 110 may use the same 
network or different networks. In an embodiment, network 120 may support wireless 
communications. In another embodiment, network 120 may support hard-wired 
communications, such as a telephone line or cable. In an embodiment network, 120 may 
1 5 be the Internet and supports IP (Internet Protocol). In other embodiments, network 1 20 
may be a local area network (LAN) or a wide area network (WAN). In still other 
embodiments, network 120 may support any appropriate protocol. 

Server 130 may include processor 135, storage device 140, network adapter 145, 
input device 150, and output device 155, all communicatively coupled via bus 180. 

20 Processor 1 35 may represent a central processing unit of any type of architecture, such as 
a CISC (Complex Instruction Set Computing), RISC (Reduced Instruction Set 
Computing), VLIW (Very Long Instruction Word), or a hybrid architecture, although any 
appropriate processor may be used. Processor 135 executes instructions and includes that 
portion of server 130 that controls the operation of the entire server. Although not 

25 depicted in Fig. 1 , processor 1 35 typically includes a control unit that organizes data and 
program storage in computer memory and transfers data and other information between 
the various parts of server 130. Processor 135 may receive input data from input device 
150 and network adapter 145, read and store code and data ui storage device 140, and may 
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present output data to a user via output device 155. Processor 135 also may transmit and 
receive packets of information across network 120 using network adapter 145. 

Although server 130 is shown to contain only a smgle processor and a single bus, 
the present invention applies equally to servers that may have multiple processors and to 
5 servers that may have multiple buses with some or all performing different fonctions in 
different ways. 

Storage device 140 represents one or more mechanisms for storing data. For 
example, storage device 140 may include read only memory (ROM), random access 
memory (RAM), magnetic disk storage media, optical storage media, flash memory 
10 devices, and/or other machine-readable media. Although only one storage device 140 is 
shown, multiple storage devices and multiple types of storage devices may be present. 
Further, although server 130 is drawn to contain storage device 140, it may be distributed 
across other servers. 

Storage device 140 may include controller 160, authorized disclosure letter 165, 
15 authorization data 170, and documents 175. Controller 160 may include instructions 
capable of being executed on processor 135 to carry out the functions of the present 
invention. In another embodiment, some or all of the fimctions of the present invention 
may be carried out via hardware in lieu of a processor-based system. Of course, storage 
device 140 may also contain additional software and data (not shown), which is not 
20 necessary to understanding the invention. 

Authorized disclosure letter 165 contains the terms and conditions under which 
companies and individuals disclose the information in documents 175 to each other. 
Authorized disclosure letter 165 is further described below widi reference to Fig. 3. 

Authorization data 170 may contain security information regarding which 
25 companies and which individuals are authorized to view which portions of documents 
175. Authorization data 170 is further described below with reference to Figs. 10 and 1 1 
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Documents 175 may contain information, including confidential information, that 
a participant in a program wishes to share with other participants involved in the same 
program. Although documents 175 is drawn as including two entities, in other 
embodiments there may be any number of documents organized by program and/or by 
5 company. Docimients 175 is further described below with reference to Fig. 4. Although 
documents 175 is drawn as being contained within server 130, in other embodiments 
some or all of docxmients 175 may be distributed across other servers attached to network 
120 or may be included within clients 110. 

Bus 180 may represent one or more busses (e.g., PCI, ISA (Industry Standard 
10 Architecture), X-Bus, EISA (Extended Industry Standard Architecture), or any other 
appropriate bus and bridges (also called bus controllers). 

Network adapter 145 facilitates communication between server 130 and network 
120. Network adapter 145 provides server 130 with a means of electronically 
communicating information with a remote computer, such as client 110. In addition, in 

15 another embodiment, network adapter 145 may support distributed processing, which 
enables server 130 to share a task with other devices linked to network 120, Although 
network adapter 145 is shown as part of server 130, in another embodiment they may be 
packaged separately. Although only one network adapter 145 is shown, in other 
embodiments multiple network adapters of the same or of a variety of types may be 

20 present. 

Input device 150 is that part of server 130 that accepts input from a user. In an 
embodiment, input device 150 may be a keyboard, but in other embodiments, input device 
150 may be a pointing device, mouse, trackball, keypad, touchpad, touch screen, pointing 
stick, microphone, or any other appropriate input device. Although only one input device 
25 1 50 is shown, in other embodiments any number of input devices of the same or of a 
variety of types may be present. In another embodiment, input device 150 may not be 
present. 
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Output device 155 communicates information to the user of server 130. Output 
device 155 may be a cathode-ray tube (CRT) based video display well known in the art of 
computer hardware. But, in other embodiments output device 155 may be replaced with a 
liquid crystal display (LCD) based or gas, plasma-based, flat-panel display. In still other 
5 embodiments, any appropriate display device may be used. In yet other embodiments, a 
speaker that produces audio output may be used. Although only one output device 155 is 
shown, in other embodiments, any number of output devices of different types or of the 
same type may be present. In other embodiments, output device 1 55 might not be present. 

Server 130 may be implemented using any suitable hardware and/or software, 
10 such as a personal computer or other electronic computing device. Portable computers, 
laptop or notebook computers, and mainframe computers are examples of other possible 
configurations of server 130. The hardware and software depicted in Fig, 1 may vary for 
specific applications and may include more or fewer elements than those depicted. For 
example, other peripheral devices such as audio adapters, or chip programming devices, 
1 5 such as EPROM (Erasable Programmable Read-Only Memory) programming devices 
may be used in addition to or in place of the hardware already depicted. Thus, an 
embodiment of the invention may apply to any hardware configuration that supports 
conmiunicating information to clients. 

As will be described in detail below, aspects of an embodiment pertain to specific 
20 apparatus and method elements implementable on servers. In another embodiment, the 
invention may be implemented as a program product for use with a server. The programs 
defining the functions of this embodiment may be delivered to a server via a variety of 
signal-bearing media, which include, but are not limited to: 

(1) information permanently stored on a non-rewriteable storage medium (e.g., 
25 read-only memory devices attached to or within a server, such as a CD-ROM readable by 

a CD-ROM drive); 

(2) alterable information stored on a rewriteable storage medium (e.g., a hard disk 
drive or diskette); or 
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(3) information conveyed to a server by a communications medium, such as 
through a computer or telephone network accessed via network adapter 145, including 
wireless communications. 

Such signal-bearing media, when carrying processor-readable instructions that 
5 direct the fimctions of the present invention, represent embodiments of the present 
invention. 

Fig. 2 depicts a block diagram of user interface log-in screen 200, which may be 
created by server 130, sent to client 1 10 via network 120, and displayed at cHent 1 10 via 
output device 1 12. A user at cUent 110 may enter data into the fields of log-in screen 200 

10 via input device 111. User interface log-in screen 200 may include user identification 
data fields 205 and non-disclosure agreement number field 210. User identification data 
field 205 identifies the user who is requesting access, and non-disclosure agreement 
number 210 identifies a contract that was previously signed between the user (or the 
user's employer or affiliated company) and the company that controls or administers 

15 server 130, 

Fig. 3 depicts a block diagram of user interface contract-acceptance screen 300, 
according to an embodiment of the invention. Contract-acceptance screen 300 may be 
created by server 130, sent to client 1 10 via network 120, and displayed at chent 110. 
Contract-acceptaace screen 300 includes contract language 305 from authorized- 
20 disclosure letter 165, acceptance button 310, and cancel button 315. After reading 

contract language 305, the user may accept the terms and conditions of contract language 
305 by selecting acceptance button 310 or may decline the contract by selecting cancel 
button 315. 

Fig. 4 depicts a block diagram of user interface access-control screen 400, 
25 according to an embodiment of the invention. Access-control screen 400 may be created 
by server 130, sent to client 1 10 via network 120, and displayed at client 1 10. Access- 
control screen 400 may be manipulated by a participant to control access by others to the 

participant's documents, such as documents 175, Program field 405 allows the participant 
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to select the applicable program* Companies requesting access 410 allows the participant 
to approve or deny access requests from other companies. Companies granted access 415 
displays those companies that were previously granted access and allows the participant to 
revoke access. Companies denied access 420 displays those companies who have 
5 previously been denied access to documents 175 and provides the participant with an 
opportunity to approve access. 

Fig. 5 depicts a block diagram of user interface field-activity screen 500, 
according to an embodiment of the invention. Field-activity screen 500 may be created 
by server 130, sent to client 1 10 via network 120, and displayed at client 1 10, Field- 
1 0 activity screen 500 may be used by a representative, such as a field representative, of the 
company associated with server 130 to display which companies are participating in the 
exchange of documents 175. 

Fig. 6 depicts a block diagram of user interface user-activity screen 600, according 
to an embodiment of the invention. User-activity screen 600 may be created by server 

15 130, sent to chent 1 1 0 via network 120, and displayed at cUent 110. User-activity screen 
600 may be used by a participant to display list-of-companies 605, which are companies 
that may participate in the exchange of documents 175 with the participant. Although 
seven companies are shown, any number may be present, corresponding to the number of 
companies that are authorized to exchange documents 175 with the participant with 

20 respect to the selected program. The companies may be displayed on a per-program basis, 
and the participant may select the desired program using tabs 610 and 615. Although two 
tabs 610 and 615 are shown, any number of tabs may be present corresponding to the 
programs for which that the participant is authorized. Server 130 generates Ust-of- 
companies 605 fi*om authorization data 170. 

25 Fig. 7 depicts a block diagram of user interface request-access screen 700, 

according to an embodiment of the invention. Request-access screen 700 may be created 
by server 130, sent to client 1 10 via network 120, and displayed at client 110. Request- 
access screen 700 may be used by a user to request access to documents 175 on a per- 
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company basis. Request-access screen 700 includes list-of-companies 705, which 
includes both companies for which the user is ah*eady authorized and companies for 
which the user may request access. Although six companies are shown in Kst-of- 
companies 705, any number may be present, and none, some, or all of them may be 
5 checked as having approved access to documents 175. The user may request access from 
an additional company by checking the name of the company and selecting request-access 
button 710. Although the user interface elements of check boxes and selection buttons are 
shown, in other embodiments any suitable user interface elements may be provided. 

Fig. 8 depicts a block diagram of user interface company-information screen 800, 
10 according to an embodiment of the invention. Company-information screen 800 may be 
created by server 130, sent to client 110 via network 120, and displayed at client 110, 
Company-information screen 800 may display contact information 805 for companies 
who are participating in programs with the user. Company-information screen 800 may 
also display file information 810, which contains information about the files within 
15 documents 175 that are associated with the displayed company and program. Although 
only one contact and one file are shown in Fig. 8, in other embodiments any number of 
contacts and files may be displayed, and the data displayed are only examples, and the 
invention is not so limited. 

Fig. 9 depicts a block diagram of user interface my-company-information screen 
20 900, according to an embodiment of the invention. My-company-information screen 900 
allows a user or p^icipant to manage the user's company information, which may 
include contact information 905, and files 910 within documents 175. My-company- 
information screen 900 may provide the user the ability to add, view, delete, or update the 
technical information within documents 175. Although two contact names and two files 
25 910 within documents 175 are shown, any number may be present and the invention is not 
so limited. Further, the invention is not limited to the example data shown in Fig, 9, and 
any suitable data may be present. Files 910 may be displayed on a per-program basis. 
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Fig. 10 depicts a flowchart of processing, according to an embodiment of the 
invention. Control begins at block 1000. Control then continues to block 1005 where 
controller 160 determines whether the non-disclosure agreement number entered in field 
210 matches a non-disclosure agreement number in authorization data 170 as part of a 
5 request for access from an applicant. If the determination at block 1005 is true, then 
control continues to block 1040 where controller 160 determines whether the company 
associated with the access request is on an approved program list in authorization data 
170. 

If the determination at block 1040 is true, then control continues to block 1 105 in 
10 Fig, 1 1 where controller 160 determines whether the applicant is an employee of the 
associated company using authorization data 170. If the determination at block 1 105 is 
false, then control continues to block 1110 where controller 160 sends a denial email to 
the applicant. Control then continues to block 1 198 where the function returns. 

If the determination at block 1 105 is true, then control continues to block 1115 
15 where controller 160 adds the comply and the applicant to the approved program. 

Control then continues to block 1 120 where controller 160 displays authorized disclosure 
letter 165 to the appUcant, as previously described above with reference to Fig. 3. 
Referring again to Fig. 11, control then continues to block 1 125 where controller 160 
determines whether the apphcant agreed to the terms of the ADL. If the determination at 
20 block 1 125 is false, then control continues to block 1 1 10, as previously described above. 

If the determination at block 1 125 is true, then control continues to block 1 130 
where controller 160 prepares a list of companies for each program, as previously 
described above with reference to Fig. 6. Referring again to Fig. 11, control then 
continues to block 1 135 where controller 160 processes requests for permission to access 
25 information in documents 175 that belong to other companies, as previously described 
above with reference to Fig. 7. 
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Referring again to Fig. 11, control then continues to block 1 140 where controller 
160 processes the qjproval or denial of requests, as previously described above with 
reference to Fig 4. Control then continues to block 1 199, where the fimction returns. 

Referring again to Fig. 10, if the determination at block 1040 is false, then control 
5 continues to block 1030 where controller 160 determines whether the program owner 
approves. If the determination at block 1030 is false, the control continues to block 1025 
where controller 160 sends a denial email to the applicant. Control then contmues to 
block 1099 where the function returns. If the determination at block 1030 is true, then 
control continues to block 1 105 in Fig. 1 1, as previously described above. 

10 Referring again to Fig. 10, if the determination at block 1005 is false, then control 

continues to block 1010 where controller 160 determines whether the company associated 
with the applicant is listed in an account database in authorization data 170 and has a field 
representative. If the determination at block 1010 is true, then control continues to block 
1015 where controller 160 sends an email to the field representative and the program 

15 owner. Control then continues to block 1020 where controller 160 determines whether 
the field representative approves the authorization request. If the determination at block 
1020 is true, then control continues to block 1030, as previously described above. 

If the determination at block 1020 is false, then control continues to block 1025 
where controller 160 sends a denial email to the apphcant. Control then continues to 
20 block 1099 where the function returns. 

If the determination at block 1010 is false, the control continues directly to block 
1025, as previously described above. 
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